I'm going to assume that you don't have neighbors statically configured
under your EIGRP processes.  EIGRP will send hello traffic, before sending
unicast messages to the neighbors on the subnet.

If you add permit eigrp host 54.1.3.254 host 224.0.0.10 to your first acl
before the deny eigrp any any, you should be fine.

You could also change your "deny eigrp any any" to "deny eigrp any any log"
while watching the console (or logging to the buffer) and see what traffic
is dropped.

Marvin Greenlee, CCIE #12237 (R&S, SP, Sec)
Senior Technical Instructor - IPexpert, Inc.
Telephone: +1.810.326.1444
Fax: +1.810.454.0130
Mailto: [EMAIL PROTECTED]
 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of GAURAV MADAN
Sent: Wednesday, June 18, 2008 10:29 AM
To: [email protected]
Subject: [OSL | CCIE_RS] EIGRP access-list

Hi All

I have following topology

R1 54.1.3.254 ========== FR cloud =============54.1.3.6 (s0/0/0)R2

My FR connectivity is fine and I am able to ping across
I enable app EIGRP and my neighbor relationship is UP .. everything fine.

I configured following access-li on R2

ip access-li ext 101
permit eigrp host 54.1.3.254 host 54.1.3.6
deny eigrp any any
permit ip any any
!
int s0/0/0
ip access-gr 101 in

As a result of this my EIGRP adj goes down. I dont understand reason for
this :(

However if my macth condition is " permit eigrp host 54.1.3.254 any "
; everything works fine .

Can someone please comment on this ?

Thnx in advance
Gaurav Madan

Reply via email to